Assessment Lead

Position Overview

WarCollar Industries is seeking an experienced Assessment Lead (AL) to support the National Telecommunications and Information Administration (NTIA) in conducting High Value Asset (HVA) cybersecurity assessments. The Assessment Lead will serve as the primary point of contact for the assessment team and will be responsible for leading the overall execution of HVA assessments from planning through final reporting.

The Assessment Lead will oversee assessment planning, technical activities, documentation reviews, stakeholder interviews, technical scans, risk analysis, and evaluation of implemented cybersecurity controls. This position will work closely with the Technical Lead, Operators, government stakeholders, and other assessment personnel to ensure assessments are conducted effectively and that findings and recommendations are clearly communicated.

,

Required Skills Key Responsibilities

• Serve as the primary point of contact for the HVA assessment team.
• Lead and coordinate the assessment team throughout the assessment lifecycle.
• Manage the overall execution of HVA assessments in accordance with Department of Commerce and HVA assessment requirements.
• Develop and support assessment planning activities, including assessment scope, objectives, schedules, and technical approaches.
• Oversee assessment preparation, coordination, documentation reviews, stakeholder interviews, technical scans, testing, and risk analysis.
• Direct assessment activities designed to identify cybersecurity vulnerabilities and evaluate the effectiveness of implemented security controls.
• Coordinate activities across Risk and Vulnerability Assessment (RVA), Security Architecture Review (SAR), and System Security Engineering (SSE) requirements as applicable to the assessment.
• Lead or support Technical Exchange Meetings (TEMs), kickoff meetings, status meetings, technical discussions, and assessment out-briefs.
• Coordinate with government stakeholders to obtain required documentation, evidence, system information, and access necessary to conduct assessments.
• Ensure technical assessment activities are properly coordinated between the Assessment Lead, Technical Lead, and Operators.
• Review assessment findings and ensure technical results are accurately documented and supported by appropriate evidence.
• Analyze assessment results and communicate cybersecurity risks, vulnerabilities, control gaps, and potential impacts to stakeholders.
• Lead the development, review, and delivery of comprehensive HVA assessment reports.
• Debrief government stakeholders on assessment results, significant findings, risks, and recommended remediation actions.
• Communicate assessment status, technical issues, risks, and progress to government and contractor leadership.
• Ensure assessment deliverables are accurate, complete, and submitted within established timelines.
• Facilitate collaboration among technical personnel and stakeholders throughout the assessment lifecycle.
• Provide guidance and direction to assessment personnel and ensure assigned activities remain aligned with the assessment objectives.
• Support the identification and development of recommendations and mitigation strategies designed to reduce cybersecurity risk.
• Maintain awareness of applicable federal cybersecurity requirements, policies, standards, and HVA assessment methodologies.

,

Desired Skills Desired Qualifications

• Experience supporting Federal High Value Asset (HVA) cybersecurity assessments.
• Experience with CISA/HACS assessment methodologies.
• Experience with Risk and Vulnerability Assessments (RVA).
• Experience with Security Architecture Reviews (SAR).
• Experience with System Security Engineering (SSE).
• Experience leading penetration testing, vulnerability scanning, network mapping, phishing, wireless, web application, operating system, or database security assessments.
• Experience with federal cybersecurity standards and regulations, including FISMA, FIPS 199/200, NIST SP 800-series publications, and OMB A-130.
• Experience with cloud cybersecurity architecture and assessment.
• CISSP, cloud security, security engineering, or comparable cybersecurity certification.
• Experience working directly with Department of Commerce, NTIA, or other Federal Government cybersecurity organizations.

,

Additional Details

Security Requirement

This position requires a minimum of a Secret security clearance. An interim Secret clearance is acceptable to begin work, subject to applicable government requirements.

,

About WarCollar Industries About us: WarCollar Industries, LLC is a veteran-owned small business. We maintain a team of cybersecurity experts committed to protecting complicated data and distribution systems and providing decision makers with the most accurate assessment of residual risk possible. We work with our clients to solve the toughest challenges in the ever-evolving digital landscape. Services include network defense, computer network attack, secure network design, penetration testing and vulnerability assessment. WarCollar enables its clients to find, fix, stop, and ultimately solve cybersecurity problems across their entire enterprise.

WarCollar offers generous benefits including: Medical insurance premium coverage; PTO based on billable hours; federal holidays plus your birthday; matching 401k, education reimbursement plus paid training days; performance bonuses; referral bonuses; government shutdown protection; monthly team building events plus two major social events annually.

WarCollar Industries, LLC is an equal opportunity employer. WarCollar does not discriminate in employment based upon race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, status as a protected military veteran, or other non-merit factor.